Mylittleforum: >> My Little Forum >> 2.4.12 Security Vulnerabilities
my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.
CVSS Score
6.5
EPSS Score
0.001
Published
2019-05-21
my little forum 2.4.12 allows CSRF for deletion of users.
CVSS Score
6.5
EPSS Score
0.001
Published
2018-08-20
The Add page option in my little forum 2.4.12 allows XSS via the Title field.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-05
The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-05